Xerox WorkCentre 5632/5638/5645/5655 - Common Criteria
Xerox WorkCentre 5632/5638/5645/5655 - Common Criteria
Xerox WorkCentre 5632/5638/5645/5655 - Common Criteria
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
<strong>Xerox</strong> <strong>WorkCentre</strong> <strong>5632</strong>/<strong>5638</strong>/<strong>5645</strong>/<strong>5655</strong>/5665/5675/5687<br />
Multifunction Systems Security Target<br />
While IIO or ODIO can be disabled, doing so will remove the TOE from its<br />
evaluated configuration.<br />
Additionally, only authenticated system administrators can assign<br />
authorization privileges to users, establish a recurrence schedule for “On<br />
Demand” image overwrite, enable/disable SSL support, create/install<br />
X.509 certificates, enable/disable and download the audit log,<br />
enable/disable and configure (rules) IP filtering, enable/disable disk<br />
encryption, enable/disable use of <strong>Common</strong> Access Cards or<br />
enable/disable and configure IPv6.<br />
1.3.2.10.User Data Protection - AES (TSF_EXP_UDE)<br />
The TOE utilizes data encryption (AES) and cryptographic checksum<br />
generation and secure hash computation (SHA-1) to support encryption<br />
and decryption of designated portions of the hard disk where user files<br />
may be stored. Those packages meet the following standards: AES-256-<br />
FIPS-197 (CAVP Certificate No. 1471), SHA-1 – FIPS-180-2 (CAVP<br />
Certificate No. 1331).<br />
1.3.3. Evaluated Configuration<br />
In its evaluated configuration, the Image Overwrite Security Package is<br />
installed and IIO, ODIO and SSL (for protection of management data only)<br />
are enabled on the TOE. The FAX option, if purchased by the consumer,<br />
is installed and enabled. All other configuration parameter values,<br />
including the presence of the Network Scanning Accessory, are optional.<br />
The LanFax option is included in the evaluated configuration of the TOE.<br />
Consumers of the TOE should refer to the Product Security Guidance at<br />
http://www.xerox.com/security for more information.<br />
17<br />
Copyright 2009 <strong>Xerox</strong> Corporation, All rights reserved